Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
File:                     bycituUTNGUloqmUZBtOJ_BNU1Y.mft (raw, json)
Hash identifier:          DTRGoa0SXMbxbf2xTJCDyktYeLfygiiX/O+Q00Iduak=
Subject key identifier:   48:B9:8C:1E:6F:5F:F9:38:40:05:BA:DC:91:80:21:C0:E4:BA:E6:9D
Authority key identifier: 6F:27:22:B6:E5:13:34:65:25:A2:A9:94:64:1B:4E:27:F0:4D:53:56
Certificate issuer:       /CN=A91870B9/serialNumber=6F2722B6E513346525A2A994641B4E27F04D5356
Certificate serial:       024D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
Manifest number:          024A
Signing time:             Fri 31 Jan 2025 01:54:17 +0000
Manifest this update:     Fri 31 Jan 2025 01:54:16 +0000
Manifest next update:     Fri 07 Feb 2025 01:54:16 +0000
Files and hashes:         1: bycituUTNGUloqmUZBtOJ_BNU1Y.crl (hash: YCxS4o2UCud5xCtbor3+bzcoaqtcw3ctYjWXUDU0Hhw=)
                          2: A48AD700072111ED91EABE39C4F9AE02.roa (hash: LYlnmY38WC+/5pBo6/8yuliMtbU1c9X35OeWacBJJcc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 589 (0x24d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91870B9/serialNumber=6F2722B6E513346525A2A994641B4E27F04D5356
        Validity
            Not Before: Jan 31 01:54:16 2025 GMT
            Not After : Feb  7 01:54:16 2025 GMT
        Subject: CN=679c2d49-07b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8f:8e:d1:86:ce:08:80:d4:99:7d:31:b6:eb:
                    b1:a4:db:27:de:6a:55:58:c3:4f:32:6f:27:d0:c0:
                    56:fc:1b:1d:bd:96:7a:6b:9f:c5:a3:c3:20:dd:2b:
                    f2:f9:4c:e5:df:8d:05:d8:09:01:7e:d1:dd:90:3f:
                    9f:ea:e5:4e:8f:b1:43:46:cd:b0:b1:f1:61:13:48:
                    2b:1b:77:d2:9c:7b:fa:d2:14:cb:c8:40:79:37:ab:
                    f5:18:19:d1:2b:27:d4:e1:4e:99:30:17:9f:5a:82:
                    65:4a:f9:5c:42:e4:ef:f4:8f:ce:80:53:7d:28:2f:
                    03:5c:c4:69:48:e9:3d:55:0c:40:d4:a9:f3:bc:e6:
                    f1:2e:a2:df:93:1d:67:be:2a:13:9a:5f:ff:e0:1d:
                    ed:8d:68:99:32:90:f6:de:2f:7c:f5:80:99:17:5f:
                    56:9e:4c:2b:10:bb:9c:00:20:ab:89:7a:a6:36:09:
                    2d:97:8e:27:52:9d:ec:ba:7c:71:b2:37:b0:b8:dd:
                    86:eb:fa:ca:2e:d5:55:62:86:2e:ea:98:d7:a3:9d:
                    13:8b:e6:c1:94:ec:cb:9f:c6:c0:bf:37:58:92:15:
                    ef:85:eb:cb:97:1e:82:30:97:1b:c0:b6:8f:c8:6c:
                    c5:2e:79:07:2d:59:7e:f9:ab:70:55:8e:18:6e:b0:
                    b0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B9:8C:1E:6F:5F:F9:38:40:05:BA:DC:91:80:21:C0:E4:BA:E6:9D
            X509v3 Authority Key Identifier:
                keyid:6F:27:22:B6:E5:13:34:65:25:A2:A9:94:64:1B:4E:27:F0:4D:53:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bycituUTNGUloqmUZBtOJ_BNU1Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91870B9/7C8C890E071E11EDA2E3F132C4F9AE02/bycituUTNGUloqmUZBtOJ_BNU1Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:f5:94:de:81:40:1b:8f:c2:e6:7e:88:75:13:52:08:55:63:
         3e:06:3b:63:c7:b6:21:47:a5:dc:a4:1e:72:db:43:97:ec:7d:
         b7:61:96:5b:cb:6d:17:37:45:3a:37:0b:8d:d8:53:12:38:59:
         ce:61:06:67:a5:f9:e8:86:3e:5c:0e:1f:a5:3c:61:6c:05:a3:
         9f:41:89:d6:ae:40:36:66:a2:f3:a9:ef:6a:f5:d2:59:a9:c3:
         88:5a:6a:e6:ce:17:50:b2:67:50:f9:2a:ea:06:cb:5f:15:51:
         9f:9f:12:51:4a:5e:47:86:c2:5e:44:f1:ab:54:8a:45:74:55:
         34:b8:da:7a:7b:5c:68:bb:cf:0c:31:3a:24:e9:32:58:14:46:
         eb:3a:90:60:07:f7:42:0e:36:cb:89:d0:09:81:9c:c7:3e:1a:
         51:5e:9a:12:b5:c4:7a:f7:dd:e2:7f:58:69:28:64:9f:4c:82:
         fa:01:6f:e9:94:14:3a:bd:65:5e:ab:1c:30:b1:bb:78:6a:86:
         e9:db:d3:4f:f6:10:e9:bb:b4:f6:b0:1f:0e:31:a7:50:a8:7a:
         84:d6:56:fd:b1:43:e4:57:16:19:08:cb:d6:65:38:d1:e5:c1:
         e5:b0:c8:cf:a1:41:c1:07:b3:02:08:d7:30:c1:d3:5f:6c:6c:
         e7:e7:b0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----